VMSA-2008-0004 : Low: Updated e2fsprogs service console package

medium Nessus Plugin ID 40375

Synopsis

The remote VMware ESX host is missing a security-related patch.

Description

Updated e2fsprogs package address multiple integer overflow flaws

Thanks to Rafal Wojtczuk of McAfee Avert Research for identifying and reporting this issue.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2007-5497 to this issue.

Solution

Apply the missing patch.

Plugin Details

Severity: Medium

ID: 40375

File Name: vmware_VMSA-2008-0004.nasl

Version: 1.17

Type: local

Family: VMware ESX Local Security Checks

Published: 7/27/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/o:vmware:esx:2.5.4, cpe:/o:vmware:esx:3.0.1, cpe:/o:vmware:esx:2.5.5, cpe:/o:vmware:esx:3.0.2, cpe:/o:vmware:esx:3.5

Required KB Items: Host/local_checks_enabled, Host/VMware/release, Host/VMware/version

Exploit Ease: No known exploits are available

Patch Publication Date: 3/3/2008

Reference Information

CVE: CVE-2007-5497

BID: 26772

CWE: 189

VMSA: 2008-0004

Detections

Analytics